#681 Updated System.Text.Json to address CVE-2024-30105 (contributed by

@304NotModified)
danielpalme · Jul 15, 2024 · 079ffc7 · 079ffc7
2 parents 0fa15f6 + 3bbe6cd
commit 079ffc7
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 0 deletions.
diff --git a/src/Deployment/nuget/ReportGenerator.Core.nuspec b/src/Deployment/nuget/ReportGenerator.Core.nuspec
@@ -29,6 +29,7 @@ https://github.com/danielpalme/ReportGenerator/wiki/Custom-history-storage</desc
         <dependency id="Microsoft.Extensions.Configuration.Binder" version="8.0.1" />
         <dependency id="Microsoft.Extensions.Configuration.CommandLine" version="8.0.0" />
         <dependency id="Microsoft.Extensions.Configuration.Json" version="8.0.0" />
+        <dependency id="System.Text.Json" version="8.0.4" />
         <dependency id="DotNetConfig" version="1.0.6" />
       </group>
 
@@ -37,6 +38,7 @@ https://github.com/danielpalme/ReportGenerator/wiki/Custom-history-storage</desc
         <dependency id="Microsoft.Extensions.Configuration.Binder" version="8.0.1" />
         <dependency id="Microsoft.Extensions.Configuration.CommandLine" version="8.0.0" />
         <dependency id="Microsoft.Extensions.Configuration.Json" version="8.0.0" />
+        <dependency id="System.Text.Json" version="8.0.4" />
         <dependency id="DotNetConfig" version="1.0.6" />
         <dependency id="McMaster.NETCore.Plugins" version="1.4.0" />
       </group>

diff --git a/src/Readme.txt b/src/Readme.txt
@@ -67,6 +67,10 @@ For further details take a look at LICENSE.txt.
 
 CHANGELOG
 
+5.3.8.0
+
+    * Fix: #681 Updated System.Text.Json to address CVE-2024-30105 (contributed by @304NotModified)
+
 5.3.7.0
 
     * Fix: Exclude empty modules/assemblies from reports

diff --git a/src/ReportGenerator.Core/ReportGenerator.Core.csproj b/src/ReportGenerator.Core/ReportGenerator.Core.csproj
@@ -87,6 +87,7 @@
     <PackageReference Include="Microsoft.Extensions.Configuration.Binder" Version="8.0.1" />
     <PackageReference Include="Microsoft.Extensions.Configuration.CommandLine" Version="8.0.0" />
     <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="8.0.0" />
+    <PackageReference Include="System.Text.Json" Version="8.0.4" />
     <PackageReference Include="StyleCop.Analyzers" Version="1.1.118">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers</IncludeAssets>
-Original file line number
+Diff line change
@@ Expand Up / @@ -67,6 +67,10 @@ For further details take a look at LICENSE.txt. @@
     CHANGELOG
+.3.8.0
+        * Fix: #681 Updated System.Text.Json to address CVE-2024-30105 (contributed by @304NotModified)
 .3.7.0
         * Fix: Exclude empty modules/assemblies from reports
@@ Expand Down @@